Senior Active Directory & Hybrid Identity Engineer

TEKsystems; United States; Hybrid; USD 99,000 - 113,000; Full time

Benefits offered by this job

Competitive compensation

Robust benefits package

401(k) and Profit-Sharing

Job summary

Berkley Technology Services seeks a Sr. Systems Engineer (Active Directory) to lead AD architecture, design, and operations across enterprise environments. You will own AD as the source of truth and drive Entra/Auth0 identity services, PKI, and IAM integration.

The role emphasizes SME-level guidance, cross-team collaboration, and automation, with an on-call rotation and a focus on security and reliability. Hybrid work model with onsite requirements in multiple US locations.

Qualifications

• Extensive AD design, multi-forest environments, 5+ years of experience.
• Experience with DNS, DCs, GPOs, Sites and Services, trusts.
• Strong AD security hardening and PAM/RBAC knowledge.

Responsibilities

• Design, implement, and manage enterprise AD/Entra hybrid infrastructure.
• Develop and maintain AD architecture: forests, domains, OUs, GPOs; troubleshoot replication, DNS, authentication.
• Automate administrative tasks across AD/Entra; monitor health and alerts.

Skills

Active directory

Azure

Domain Controllers

Microsoft Entra ID (Azure AD)

Hybrid Identity

Microsoft Entra Connect

Active Directory Security Hardening

Identity & Access Management (IAM)

LDAP / LDAPS

Conditional Access

Education

Bachelor's degree in Computer Science/IT/IS or related

Equivalent experience considered

Tools

Netwrix Directory Manager (NDM)

Okta/Auth0

Microsoft Entra ID

Job description

Description

Hybrid (4 days onsite / 1 day remote) in Wilmington, DE, Manassas, VA, or Urbandale, IA.

We expect every member of our team to actively integrate AI tools into their daily work, not as a substitute for expertise, but as a natural extension of it. Candidates who bring genuine curiosity about AI, and a demonstrated habit of using it to work smarter, will find themselves at home here.

The Sr. Systems Engineer (Active Directory) is an experienced Active Directory specialist to design, implement, and manage our enterprise-wide Active Directory /Entra Hybrid infrastructure. This is a highly technical, senior-level position requiring expertise in AD architecture, security best practices, and automation. This is not an administrator role. The ideal candidate will be a subject matter expert in AD technologies, with a proven track record of designing scalable, secure, and resilient AD solutions for complex environments. Experience with Active Directory Integrated DNS and Domain Controller administration is essential. This position is on the Platform Identity Management team with a focus on owning Active Directory as a Source of Truth (SOT) for Identity. This team is also responsible for Entra and Auth0 identity services, AD CS PKI, and Identity authN / authZ .

Systems Planning and Implementation: Serve as the enterprise subject matter expert (SME) for Active Directory architectural designs, ensuring they align with business needs and security requirements.

AD Management: Develop, implement, and maintain the AD architecture, including forests, domains, organizational units (OUs), and Group Policies (GPOs). Perform advanced troubleshooting and root cause analysis for complex AD infrastructure issues, including replication, DNS, and authentication.

Scripting/Automation : Utilize DevOps and Platform Engineering principles to support the automation of administrative tasks across the Active Directory and Entra environment. Ensures critical AD roles and Entra Identity services have health monitoring and alerting.

Security Standards: Ensure the security of the AD environment by implementing best practices for authentication, authorization, and auditing. Perform periodic Domain Controller security hardening.

Documentation: Develop and maintain comprehensive documentation, including architectural designs, configuration standards, and standard operating procedures (SOPs).

Project and cross-matrix Leadership: Lead projects, working directly with Project Management, Account Management, and Customer teams. Collaborate and consult with other Berkley Technology Services teams, including security, networking, and application development to ensure seamless integration and operational efficiency.

Mentorship: Mentor and cross-train technical staff, peers, and subordinate team members in AD/IAM technologies and best practices.

ITIL Standards: Participate and adhere to defined ITIL standards for incident, request, and change management.

On Call Rotation (PIC) is required as part of the Platform Identity Management Team.

Qualifications

Active Directory Architecture: Extensive, hands-on experience in designing, implementing, and managing large, complex, multi-forest Active Directory environments (Minimum 5 years of experience). Deep expertise in AD components such as DNS, DC, GPOs, Sites and Services, and trusts.

Netwrix Directory Manager (NDM): Proven experience implementing, configuring, and managing NDM (or similar products) to provide a policy-based delegated AD administration and governance model within a least-privilege security framework.

Windows Platforms: In-depth knowledge of Windows Server operating systems (2016, 2019, 2022, 2025) and their roles within an enterprise environment.

Security Expertise: Strong understanding of AD security best practices, including privileged access management (PAM), role-based access control (RBAC), and security hardening techniques. Previous experience with server hardening within an AD environment is preferred.

Identity & Access Management (IAM): Ability to integrate Active Directory with IAM solutions aligned with Zero Trust, identity governance, and adaptive authentication concepts. Previous experience with Okta/Auth0, Microsoft Entra ID, MFA, LDAPS preferred.

Communication: Excellent written and verbal communication skills, with the ability to document and convey complex technical concepts to both technical and non-technical audiences.

Disaster Recovery: Experience with disaster recovery and business continuity planning for AD and its role within the organization's technology stacks.

AI Tools: Demonstrate comfort using AI-assisted tools in a professional context; approach AI as a standard part of modern workflow rather than a specialized or optional capability. Demonstrated comfort using AI-assisted tools in a professional context; approaches AI as a standard part of modern workflow rather than a specialized or optional capability.

Education Requirement

Bachelors degree in Computer Science, Information Technology, Information Systems, or a related discipline.

Equivalent experience and/or alternative qualifications will be considered.

Additional Company Details

The company offers a competitive compensation plan and robust benefits package for full time regular employees which for this role include:

Base Salary Range: $107,000-$198,000

Benefits: Health, Dental, Vision, Life, Disability, Wellness, Paid Time Off, 401(k) and Profit-Sharing plans.

Skills

Active directory, Azure, Domain Controllers, Microsoft Entra ID (Azure AD), Hybrid Identity, Microsoft Entra Connect, Active Directory Security Hardening, Identity & Access Management (IAM), LDAP / LDAPS, Conditional Access

Top Skills Details

Active directory,Azure,Domain Controllers,Microsoft Entra ID (Azure AD),Hybrid Identity,Microsoft Entra Connect,Active Directory Security Hardening,Identity & Access Management (IAM),LDAP / LDAPS,Conditional Access

Additional Skills & Qualifications

This person will be the top Active Directory Subject Matter Expert (SME) at Berkley, responsible for domain controller engineering and troubleshooting, Active Directory security hardening, hybrid AD/Entra identity support, and helping prepare the environment for future Active Directory expansion into Azure.

Experience Level

Expert Level

Job Type & Location

This is a Contract to Hire position based out of Wilmington, DE.

Pay and Benefits

The pay range for this position is $72.00 - $82.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your jobclassification and length of employment. Benefits are subject to change and may besubject to specific elections, plan, or program terms. If eligible, the benefitsavailable for this temporary role may include the following:Medical, dental & visionCritical Illness, Accident, and Hospital401(k) Retirement Plan Pre-tax and Roth post-tax contributions availableLife Insurance (Voluntary Life & AD&D for the employee and dependents)Short and long-term disabilityHealth Spending Account (HSA)Transportation benefitsEmployee Assistance ProgramTime Off/Leave (PTO, Vacation or Sick Leave)

Application Deadline

This position is anticipated to close on Oct 21, 2026.

Workplace Type

This is a hybrid position in Wilmington,DE.

Equal Opportunity Employer Statement

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance

Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI)

We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.